]>
granicus.if.org Git - pdns/log
Peter van Dijk [Thu, 1 Nov 2018 14:05:03 +0000 (15:05 +0100)]
remove (broken) centos6 dnsdist init script
Peter van Dijk [Thu, 1 Nov 2018 14:04:45 +0000 (15:04 +0100)]
el6 dnsdist: on upgrade, restart instead of stop
Remi Gacogne [Wed, 31 Oct 2018 13:58:16 +0000 (14:58 +0100)]
Merge pull request #7115 from rgacogne/dnsdist-secpoll
dnsdist: Add security polling
Remi Gacogne [Wed, 31 Oct 2018 10:54:45 +0000 (11:54 +0100)]
Merge pull request #7078 from rgacogne/dnsdist-creation-order
dnsdist: Add a 'creationOrder' field to rules
Remi Gacogne [Wed, 31 Oct 2018 09:50:09 +0000 (10:50 +0100)]
dnsdist: Remove useless call to gettimeofday() in the security poll
Remi Gacogne [Wed, 31 Oct 2018 09:39:45 +0000 (10:39 +0100)]
Merge pull request #7117 from chbruyand/dnsdist-webserver-creds
dnsdist: add ability to update webserver credentials
Remi Gacogne [Wed, 31 Oct 2018 09:21:54 +0000 (10:21 +0100)]
dnsdist: Correctly handle PACKAGEVERSION, check name in secpoll reply
Charles-Henri Bruyand [Wed, 31 Oct 2018 08:36:38 +0000 (09:36 +0100)]
Update dnsdist-lua.cc
Charles-Henri Bruyand [Tue, 30 Oct 2018 16:33:39 +0000 (17:33 +0100)]
dnsdist: refactor webserver config in a single table
Charles-Henri Bruyand [Tue, 30 Oct 2018 13:33:54 +0000 (14:33 +0100)]
Update test_API.py
Charles-Henri Bruyand [Tue, 30 Oct 2018 13:29:51 +0000 (14:29 +0100)]
dnsdist: add ability to update webserver credentials
Remi Gacogne [Tue, 30 Oct 2018 10:11:49 +0000 (11:11 +0100)]
dnsdist: Add security polling
Remi Gacogne [Tue, 30 Oct 2018 09:14:46 +0000 (10:14 +0100)]
Merge pull request #7094 from neilcook/udr
Unique DNS Responses
Remi Gacogne [Mon, 29 Oct 2018 09:07:19 +0000 (10:07 +0100)]
Merge pull request #7109 from chbruyand/dnsdist-console-output-limit
dnsdist: add setConsoleOutputMaxMsgSize function
Remi Gacogne [Sat, 27 Oct 2018 17:17:54 +0000 (19:17 +0200)]
Merge pull request #7108 from rgacogne/dnsdist-tcp-smart
dnsdist: Wrap TCP connection objects in smart pointers
Remi Gacogne [Sat, 27 Oct 2018 17:16:11 +0000 (19:16 +0200)]
Merge pull request #7110 from chbruyand/dnsdist-docs-allow-from
dnsdist docs: update documentation on updating ACLs via the API
Charles-Henri Bruyand [Fri, 26 Oct 2018 16:19:05 +0000 (18:19 +0200)]
dnsdist docs: update documentation on updating ACLs via the API
Charles-Henri Bruyand [Fri, 26 Oct 2018 15:21:28 +0000 (17:21 +0200)]
dnsdist: add setConsoleOutputMaxMsgSize function to tune console output message maximum size
Pieter Lexis [Fri, 26 Oct 2018 11:31:23 +0000 (13:31 +0200)]
Merge pull request #7024 from cmouse/geoip-config
geoipbackend: Handle read error for config file
Pieter Lexis [Fri, 26 Oct 2018 11:30:33 +0000 (13:30 +0200)]
Merge pull request #7033 from pieterlexis/ubuntu-cosmic-pkgs
Add Ubuntu Cosmic Cuttlefish build target
Pieter Lexis [Fri, 26 Oct 2018 11:30:20 +0000 (13:30 +0200)]
Merge pull request #7043 from Habbie/el7-arm64
fixes for el7 on arm64
Pieter Lexis [Fri, 26 Oct 2018 11:30:01 +0000 (13:30 +0200)]
Merge pull request #7059 from pieterlexis/rec-read-dns-root-data
Recursor: Allow reading root DNSSEC keys from file
Pieter Lexis [Fri, 26 Oct 2018 11:29:29 +0000 (13:29 +0200)]
Merge pull request #7074 from rgacogne/auth-py-regression-tests-log
auth: Print the content of pdns.log when the regression tests fail
Pieter Lexis [Fri, 26 Oct 2018 11:29:15 +0000 (13:29 +0200)]
Merge pull request #7075 from rgacogne/dnsdist-dynblock-nxd
dnsdist: Support the NXDomain action with dynamic blocks
Neil Cook [Fri, 26 Oct 2018 10:28:57 +0000 (10:28 +0000)]
Document NOD and UDR policy tag configuration
Neil Cook [Fri, 26 Oct 2018 10:27:12 +0000 (10:27 +0000)]
Support for protobuf policy tags for NOD and UDR
- Add configurable policy tags if NOD or UDR are detected
- Remove the tags before committing to the packet cache
Neil Cook [Fri, 26 Oct 2018 10:26:51 +0000 (10:26 +0000)]
New methods to add and remove individual policy tags
Remi Gacogne [Fri, 26 Oct 2018 08:06:13 +0000 (10:06 +0200)]
dnsdist: Wrap TCP connection objects in smart pointers
Pieter Lexis [Fri, 26 Oct 2018 07:58:05 +0000 (09:58 +0200)]
Merge pull request #7086 from jsoref/rm-pandoc
Removing pandoc remnants
Remi Gacogne [Fri, 26 Oct 2018 05:47:13 +0000 (07:47 +0200)]
Merge pull request #7104 from chbruyand/arm-32bits-warn
Fix format string issue on 32bits arm
Remi Gacogne [Fri, 26 Oct 2018 05:46:44 +0000 (07:46 +0200)]
Merge pull request #7103 from rgacogne/rec-smart-dnscombowriter
rec: Wrap our DNSComboWriter objects in smart pointers
Charles-Henri Bruyand [Thu, 25 Oct 2018 08:42:43 +0000 (10:42 +0200)]
fix string format issue on 32bits arm
Neil Cook [Wed, 24 Oct 2018 12:37:02 +0000 (12:37 +0000)]
Update settings documentation:
- New Unique DNS Response documentation
- Update and improve NOD documentation
Neil Cook [Wed, 24 Oct 2018 12:35:57 +0000 (12:35 +0000)]
Fix code-review issues:
- Indentation (tabs vs spaces, grr)
- Don't make NOD detection dependent on protobuf being enabled
Neil Cook [Wed, 24 Oct 2018 12:35:39 +0000 (12:35 +0000)]
Account for the fact that udr and nod flags are optional in protobuf
Neil Cook [Mon, 22 Oct 2018 11:05:50 +0000 (11:05 +0000)]
Remove the NOD and UDR info from Protobuf *before* adding to packet cache
Neil Cook [Mon, 22 Oct 2018 10:37:29 +0000 (10:37 +0000)]
Make SBF size configurable
Neil Cook [Fri, 19 Oct 2018 11:25:37 +0000 (11:25 +0000)]
Add thread ID to snapshotCurrent()
Neil Cook [Fri, 19 Oct 2018 11:23:02 +0000 (11:23 +0000)]
Add UDR Tracking and refactor NOD support
- New Unique DNS Response tracking (tracks triplet of (qname, qtype, RR))
- Move NOD checks so that the results appear in protobuf
- Add NOD and UDR to protobuf messages
- Clear NOD and UDR flags for protobuf messsages from packet cache
Neil Cook [Fri, 19 Oct 2018 11:22:26 +0000 (11:22 +0000)]
Update ProtobufLogger.py with info from new NOD and UDR flags
Neil Cook [Fri, 19 Oct 2018 11:18:47 +0000 (11:18 +0000)]
Add NOD and UDR to Protobuf Logs
- Add newly observed domain flag to DNS Message protobuf definition
- Add unique dns response flag to RRs in DNS Message Response definition
- Utility methods to manipulate new flags in Protobuf messages
Neil Cook [Fri, 19 Oct 2018 11:16:52 +0000 (11:16 +0000)]
Refactor NOD code
- Move core Persistent Stable Bloom Filter code into a separate class
- Create new class for handling Unique DNS Responses (UDR)
- Make threadID consistent by requiring it's passed to housekeeping method
Peter van Dijk [Wed, 24 Oct 2018 12:09:49 +0000 (14:09 +0200)]
more nit
Pieter Lexis [Wed, 24 Oct 2018 12:09:12 +0000 (14:09 +0200)]
Merge pull request #7098 from Habbie/builder-amazon2
add support for building Amazon Linux 2 packages
Pieter Lexis [Wed, 24 Oct 2018 12:06:55 +0000 (14:06 +0200)]
Merge pull request #7093 from pieterlexis/el6-post-inst-issue
Fix el6 post install issue with auth
Peter van Dijk [Wed, 24 Oct 2018 12:05:46 +0000 (14:05 +0200)]
add support for building Amazon Linux 2 packages
Peter van Dijk [Wed, 24 Oct 2018 11:48:39 +0000 (13:48 +0200)]
nit
Peter van Dijk [Wed, 24 Oct 2018 11:45:38 +0000 (13:45 +0200)]
undo merge damage
Peter van Dijk [Tue, 9 Oct 2018 07:39:01 +0000 (07:39 +0000)]
build dnsdist on el7/arm64
Peter van Dijk [Mon, 8 Oct 2018 19:42:10 +0000 (19:42 +0000)]
build rec on el7/arm64; remove comment
Peter van Dijk [Mon, 8 Oct 2018 18:13:03 +0000 (18:13 +0000)]
build auth on el7/arm64
Pieter Lexis [Wed, 24 Oct 2018 07:51:07 +0000 (09:51 +0200)]
Merge pull request #7083 from Privex/patch-privex-docs1
Documentation for Reverse DNS functions, using Lua with generic SQL, plus README improvements
Remi Gacogne [Tue, 23 Oct 2018 16:46:23 +0000 (18:46 +0200)]
Merge pull request #7092 from rgacogne/dnsdist-tribool-fix
dnsdist: Fix return-type detection with boost 1.69's tribool
Remi Gacogne [Tue, 23 Oct 2018 15:17:00 +0000 (17:17 +0200)]
Merge pull request #7095 from rgacogne/dnsdist-api-tests-acl-order
dnsdist: Nodes in NMG are now ordered, fix the API regression tests
Pieter Lexis [Tue, 23 Oct 2018 15:13:44 +0000 (17:13 +0200)]
Document incompatibility between loading TAs from disk and runtime managemen
Remi Gacogne [Tue, 23 Oct 2018 14:21:19 +0000 (16:21 +0200)]
Merge pull request #7069 from rgacogne/openssl-signer-smart
Use unique pointers in the OpenSSL signer
Remi Gacogne [Tue, 23 Oct 2018 11:49:15 +0000 (13:49 +0200)]
dnsdist: Nodes in NMG are now ordered, fix the API regression tests
Remi Gacogne [Tue, 23 Oct 2018 08:52:44 +0000 (10:52 +0200)]
rec: Wrap our DNSComboWriter objects in smart pointers
Pieter Lexis [Tue, 23 Oct 2018 08:33:54 +0000 (10:33 +0200)]
Merge pull request #7085 from pieterlexis/debian-pkg-fixes
Several Debian pkg fixes
Pieter Lexis [Tue, 23 Oct 2018 08:19:19 +0000 (10:19 +0200)]
Fix el6 post install issue with auth
Remi Gacogne [Tue, 23 Oct 2018 07:57:12 +0000 (09:57 +0200)]
dnsdist: Fix return-type detection with boost 1.69's tribool
Remi Gacogne [Tue, 23 Oct 2018 07:37:52 +0000 (09:37 +0200)]
Merge pull request #7089 from pieterlexis/dnsdist-stats-add-help
dnsdist: Add HELP and TYPE for dnsdist_server_ stats
Pieter Lexis [Mon, 22 Oct 2018 14:54:54 +0000 (16:54 +0200)]
dnsdist: Add HELP and TYPE for dnsdist_server_ stats
Josh Soref [Fri, 19 Oct 2018 20:19:57 +0000 (16:19 -0400)]
Removing pandoc remnants
Pieter Lexis [Thu, 18 Oct 2018 15:04:15 +0000 (17:04 +0200)]
re-add licence files to dnsdist and rec tarball
Fixes #7082
Pieter Lexis [Thu, 18 Oct 2018 14:31:02 +0000 (16:31 +0200)]
pkgs: remove ixfrdist.service from pdns-server package
Chris (Someguy123) [Fri, 19 Oct 2018 02:55:38 +0000 (03:55 +0100)]
Packages needed for Ubuntu 18.04 + how to build sphinx docs
Other small clean ups, such as adding a link to the list of modules
and correcting the "compiling powerdns" link to point to the 4.1 docs
Chris (Someguy123) [Fri, 19 Oct 2018 01:37:36 +0000 (02:37 +0100)]
Added section on using Lua records with generic SQL
Chris (Someguy123) [Fri, 19 Oct 2018 01:09:35 +0000 (02:09 +0100)]
Various small corrections for reverse DNS functions
Someguy123 [Thu, 18 Oct 2018 23:15:52 +0000 (00:15 +0100)]
Create sections for reverse DNS functions
Documentation + examples for:
- createReverse
- createForward
- createReverse6
- createForward6
Plus minor changes for 'closest' to 'pickclosest'
Someguy123 [Thu, 18 Oct 2018 19:52:05 +0000 (20:52 +0100)]
Selector is 'pickclosest' not 'closest'
Remi Gacogne [Wed, 17 Oct 2018 15:28:58 +0000 (17:28 +0200)]
dnsdist: Add a 'creationOrder' field to rules
Remi Gacogne [Wed, 17 Oct 2018 13:31:07 +0000 (15:31 +0200)]
Merge pull request #7072 from r-bk/fix_lua_recursor4_exception_handling
pdns-recursor: properly handle exceptions thrown from lua-recursor4
Remi Gacogne [Wed, 17 Oct 2018 09:23:31 +0000 (11:23 +0200)]
Merge pull request #7068 from phonedph1/edns
rec: dump edns harder
Remi Gacogne [Wed, 17 Oct 2018 09:20:18 +0000 (11:20 +0200)]
Merge pull request #6986 from rgacogne/dnsdist-warning-dynblocks
dnsdist: Add warning rates to dynBlockRulesGroup rules
Remi Gacogne [Wed, 17 Oct 2018 09:14:47 +0000 (11:14 +0200)]
dnsdist: Support the NXDomain action with dynamic blocks
Pieter Lexis [Mon, 15 Oct 2018 10:24:59 +0000 (12:24 +0200)]
rec: automatically reload trust anchors from file
This allows external processec to update TA's without having to restart
the recursor.
Rafael Buchbinder [Wed, 17 Oct 2018 06:48:28 +0000 (09:48 +0300)]
pdns-recursor: properly handle exceptions thrown from lua-recursor4
directResolve function is used by lua-recursor4 in various callbacks. As
a result an exception thrown from this function is caught in generic
exception handlers at the end of startDoResolve (pdns_recursor).
Specifically, ImmediateServFailException is caught in the catch-all
exception handler, which obscures the origin of the error.
This commit adds handling of all exceptions inside directResolve and
converts them to error code (-1). This way, an exception in this
function is handled properly in startDoResolve and ServFail is sent
downstream.
To clarify, in case of exception the return DNSRecord vector is cleared
to make sure that old behavior is preserved, when in case of exception
the vector was not referenced in any way.
Remi Gacogne [Wed, 17 Oct 2018 08:19:48 +0000 (10:19 +0200)]
auth: Print the content of pdns.log when the regression tests fail
Remi Gacogne [Wed, 17 Oct 2018 08:04:29 +0000 (10:04 +0200)]
Merge pull request #7070 from r-bk/fix_memory_leak_in_catch_all_block
pdns-recursor: avoid a memory leak in catch-all exception handler
Remi Gacogne [Tue, 16 Oct 2018 14:23:19 +0000 (16:23 +0200)]
dnsdist: Clarify that DynBlock's warning rates can't be used alone
Remi Gacogne [Tue, 16 Oct 2018 13:22:42 +0000 (15:22 +0200)]
Merge pull request #7062 from rgacogne/dnsdist-tls-stored-sessions
dnsdist: Add a setting to control the number of stored sessions
Rafael Buchbinder [Tue, 16 Oct 2018 12:39:20 +0000 (15:39 +0300)]
pdns-recursor: avoid a memory leak in catch-all exception handler
This commit prevents a leak of DNSComboWriter in the catch-all exception
handler.
Remi Gacogne [Mon, 15 Oct 2018 15:22:30 +0000 (17:22 +0200)]
Use unique pointers in the OpenSSL signer
phonedph1 [Tue, 16 Oct 2018 02:07:50 +0000 (02:07 +0000)]
Do the edns dumping harder.
Remi Gacogne [Mon, 15 Oct 2018 15:43:50 +0000 (17:43 +0200)]
dnsdist: Check 'numberOfStoredSessions' >= 0, dismiss otherwise
Remi Gacogne [Fri, 12 Oct 2018 15:21:06 +0000 (17:21 +0200)]
dnsdist: Add a setting to control the number of stored sessions
Remi Gacogne [Mon, 15 Oct 2018 15:24:44 +0000 (17:24 +0200)]
Merge pull request #7064 from rgacogne/dnsdist-tls-accept-leak-smart
dnsdist: Wrap GnuTLS and OpenSSL pointers in smart pointers
Remi Gacogne [Fri, 12 Oct 2018 16:14:15 +0000 (18:14 +0200)]
dnsdist: Wrap GnuTLS and OpenSSL pointers in smart pointers
Remi Gacogne [Mon, 15 Oct 2018 13:29:13 +0000 (15:29 +0200)]
Merge pull request #7060 from rgacogne/dnsdist-tls-accept-leak
dnsdist: Release memory on DNS over TLS handshake failure
Remi Gacogne [Mon, 15 Oct 2018 09:27:10 +0000 (11:27 +0200)]
Merge pull request #7054 from mind04/doc-warnings2
auth: fix all warnings in the docs
Remi Gacogne [Mon, 15 Oct 2018 09:26:22 +0000 (11:26 +0200)]
Merge pull request #7057 from mind04/sd-scopemask
auth: scopeMask in the SOAData structure is unused after #5512
Pieter Lexis [Fri, 12 Oct 2018 13:35:16 +0000 (15:35 +0200)]
rec: Add `ReadTrustAnchorsFromFile` function
This allows the recursor to read the output file from `unbound-anchor`
and use these kind of files for trust anchors. This will enable
distributions to ship DNSSEC anchors with their system and use them.
Remi Gacogne [Sat, 13 Oct 2018 08:44:40 +0000 (10:44 +0200)]
dnsdist: Remove potential double-free in GnuTLS session tickets error handling
Remi Gacogne [Fri, 12 Oct 2018 17:16:43 +0000 (19:16 +0200)]
dnsdist: Also catch exceptions not derived from std::exception
Remi Gacogne [Fri, 12 Oct 2018 14:15:32 +0000 (16:15 +0200)]
dnsdist: Release memory on DNS over TLS handshake failure
Pieter Lexis [Fri, 12 Oct 2018 13:37:01 +0000 (15:37 +0200)]
rec: document `clearNTA`, `clearDS` and `clearNTA`.
Pieter Lexis [Fri, 12 Oct 2018 10:12:57 +0000 (12:12 +0200)]
rec: add `addTA` and `clearTA` for Lua config
These will replace `addDS` and `clearDS` in the future.
Remi Gacogne [Fri, 12 Oct 2018 06:44:57 +0000 (08:44 +0200)]
Merge pull request #7055 from phonedph1/rpz-log
rec: RPZ - Include zone name in loading and indexed message
phonedph1 [Thu, 11 Oct 2018 16:46:02 +0000 (16:46 +0000)]
provide some context as to which zone